rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5190/1:b..l P9435/1:b..l P5896/1:b..l P9436/1:b..l rcu: (detected by 1, t=10502 jiffies, g=31733, q=280 ncpus=2) task:syz.1.1158 state:R running task stack:23368 pid:9436 tgid:9430 ppid:5846 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5366 [inline] __schedule+0x1b18/0x50e0 kernel/sched/core.c:6747 preempt_schedule_irq+0xfe/0x1c0 kernel/sched/core.c:7069 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:216 Code: 8b 3d 44 2d 92 0c 48 89 de 5b e9 43 b6 5c 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 c0 3f 93 65 8b 15 88 49 7c 11 81 e2 00 01 ff 00 RSP: 0018:ffffc9001c0c6568 EFLAGS: 00000202 RAX: ffffffff8237814a RBX: 0000000000000001 RCX: 0000000080000000 RDX: ffff88801dab1e00 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000080 R08: ffffffff8237813d R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 000000000002726b R13: 0000000000000000 R14: ffffffff82377fc0 R15: ffff88801b600000 lookup_page_ext mm/page_ext.c:254 [inline] page_ext_get+0x1aa/0x2a0 mm/page_ext.c:526 __reset_page_owner+0x30/0x440 mm/page_owner.c:290 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0xe16/0x10f0 mm/page_alloc.c:2660 discard_slab mm/slub.c:2707 [inline] __put_partials+0x160/0x1c0 mm/slub.c:3176 put_cpu_partial+0x17e/0x250 mm/slub.c:3251 __slab_free+0x294/0x390 mm/slub.c:4503 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4138 [inline] slab_alloc_node mm/slub.c:4187 [inline] kmem_cache_alloc_noprof+0x1e1/0x390 mm/slub.c:4194 __kernfs_new_node+0xdf/0x890 fs/kernfs/dir.c:624 kernfs_new_node+0x137/0x240 fs/kernfs/dir.c:700 __kernfs_create_file+0x49/0x2e0 fs/kernfs/file.c:1034 sysfs_add_file_mode_ns+0x24a/0x310 fs/sysfs/file.c:313 create_files fs/sysfs/group.c:76 [inline] internal_create_group+0x7ea/0x1320 fs/sysfs/group.c:183 internal_create_groups fs/sysfs/group.c:223 [inline] sysfs_create_groups+0x56/0x120 fs/sysfs/group.c:249 device_add_groups drivers/base/core.c:2813 [inline] device_add_attrs+0x1be/0x670 drivers/base/core.c:2888 device_add+0x576/0xbf0 drivers/base/core.c:3620 netdev_register_kobject+0x157/0x2e0 net/core/net-sysfs.c:2170 register_netdevice+0x12b0/0x1b70 net/core/dev.c:10945 rtnl_newlink_create+0x2f0/0xa50 net/core/rtnetlink.c:3796 __rtnl_newlink net/core/rtnetlink.c:3907 [inline] rtnl_newlink+0x1a0a/0x1f60 net/core/rtnetlink.c:4022 rtnetlink_rcv_msg+0x80f/0xd70 net/core/rtnetlink.c:6912 netlink_rcv_skb+0x208/0x480 net/netlink/af_netlink.c:2533 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x7f8/0x9a0 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x8e8/0xce0 net/netlink/af_netlink.c:1882 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:733 ____sys_sendmsg+0x53c/0x870 net/socket.c:2573 ___sys_sendmsg net/socket.c:2627 [inline] __sys_sendmsg+0x271/0x360 net/socket.c:2659 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6b1318d169 RSP: 002b:00007f6b10fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6b133a6080 RCX: 00007f6b1318d169 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 RBP: 00007f6b1320e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f6b133a6080 R15: 00007f6b134cfa28 task:kworker/0:7 state:R running task stack:19416 pid:5896 tgid:5896 ppid:2 task_flags:0x4208060 flags:0x00004000 Workqueue: events dvb_usb_read_remote_control Call Trace: context_switch kernel/sched/core.c:5366 [inline] __schedule+0x1b18/0x50e0 kernel/sched/core.c:6747 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6926 preempt_schedule+0xe4/0xf0 kernel/sched/core.c:6950 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x1911/0x22f0 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x11e/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x11a/0x1d0 kernel/stacktrace.c:122 save_stack+0xfc/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x79/0x440 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0xe16/0x10f0 mm/page_alloc.c:2660 discard_slab mm/slub.c:2707 [inline] __put_partials+0x160/0x1c0 mm/slub.c:3176 put_cpu_partial+0x17e/0x250 mm/slub.c:3251 __slab_free+0x294/0x390 mm/slub.c:4503 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4138 [inline] slab_alloc_node mm/slub.c:4187 [inline] __do_kmalloc_node mm/slub.c:4317 [inline] __kmalloc_noprof+0x238/0x4d0 mm/slub.c:4330 kmalloc_noprof include/linux/slab.h:906 [inline] usb_alloc_urb+0x41/0x150 drivers/usb/core/urb.c:75 usb_internal_control_msg drivers/usb/core/message.c:96 [inline] usb_control_msg+0x18b/0x4c0 drivers/usb/core/message.c:154 m920x_read drivers/media/usb/dvb-usb/m920x.c:36 [inline] m920x_rc_core_query+0xc6/0x510 drivers/media/usb/dvb-usb/m920x.c:226 dvb_usb_read_remote_control+0xb8/0x1b0 drivers/media/usb/dvb-usb/dvb-usb-remote.c:261 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac3/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd30 kernel/workqueue.c:3400 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz.0.1157 state:R running task stack:25648 pid:9435 tgid:9429 ppid:5847 task_flags:0x400040 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5366 [inline] __schedule+0x1b18/0x50e0 kernel/sched/core.c:6747 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6926 preempt_schedule+0xe4/0xf0 kernel/sched/core.c:6950 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] wp_page_copy mm/memory.c:3548 [inline] do_wp_page+0x1e1a/0x49b0 mm/memory.c:3839 handle_pte_fault mm/memory.c:5904 [inline] __handle_mm_fault+0x2305/0x6ef0 mm/memory.c:6031 handle_mm_fault+0x3e5/0x8d0 mm/memory.c:6200 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2bb/0x8b0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0010:__put_user_nocheck_4+0x3/0x10 arch/x86/lib/putuser.S:104 Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc9001c1a78f8 EFLAGS: 00050202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000001cd030 RDX: ffff88801dab5a00 RSI: 0000000000000002 RDI: 00000000ffffffff RBP: ffffc9001c1a7a70 R08: ffffffff89ceda94 R09: 1ffff92003834ed4 R10: dffffc0000000000 R11: fffff52003834ed5 R12: 00002000001cd000 R13: 0000000000000002 R14: 0000000000000000 R15: ffffc9001c1a7d00 ____sys_recvmsg+0x2ac/0x480 net/socket.c:2806 ___sys_recvmsg net/socket.c:2835 [inline] do_recvmmsg+0x428/0xab0 net/socket.c:2930 __sys_recvmmsg net/socket.c:3004 [inline] __do_sys_recvmmsg net/socket.c:3027 [inline] __se_sys_recvmmsg net/socket.c:3020 [inline] __x64_sys_recvmmsg+0x1ab/0x260 net/socket.c:3020 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f303558d169 RSP: 002b:00007f30333f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007f30357a6080 RCX: 00007f303558d169 RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 RBP: 00007f303560e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f30357a6080 R15: 00007f30358cfa28 task:syslogd state:R running task stack:22760 pid:5190 tgid:5190 ppid:1 task_flags:0x400000 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5366 [inline] __schedule+0x1b18/0x50e0 kernel/sched/core.c:6747 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6926 preempt_schedule+0xe4/0xf0 kernel/sched/core.c:6950 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x1911/0x22f0 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x11e/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x11a/0x1d0 kernel/stacktrace.c:122 save_stack+0xfc/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x79/0x440 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0xe16/0x10f0 mm/page_alloc.c:2660 discard_slab mm/slub.c:2707 [inline] __put_partials+0x160/0x1c0 mm/slub.c:3176 put_cpu_partial+0x17e/0x250 mm/slub.c:3251 __slab_free+0x294/0x390 mm/slub.c:4503 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4318 [inline] __kmalloc_noprof+0x28e/0x4d0 mm/slub.c:4330 kmalloc_noprof include/linux/slab.h:906 [inline] kzalloc_noprof include/linux/slab.h:1036 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_check_open_permission+0x25a/0x4f0 security/tomoyo/file.c:771 security_file_open+0xac/0x250 security/security.c:3114 do_dentry_open+0x320/0x1960 fs/open.c:933 vfs_open+0x3b/0x370 fs/open.c:1086 do_open fs/namei.c:3845 [inline] path_openat+0x2caf/0x35d0 fs/namei.c:4004 do_filp_open+0x284/0x4e0 fs/namei.c:4031 do_sys_openat2+0x12b/0x1d0 fs/open.c:1429 do_sys_open fs/open.c:1444 [inline] __do_sys_openat fs/open.c:1460 [inline] __se_sys_openat fs/open.c:1455 [inline] __x64_sys_openat+0x249/0x2a0 fs/open.c:1455 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8cc05d29a4 RSP: 002b:00007fffe9c22250 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00005629f34ac910 RCX: 00007f8cc05d29a4 RDX: 0000000000000d41 RSI: 00007f8cc0771443 RDI: 00000000ffffff9c RBP: 00007f8cc0771443 R08: 0000000000000001 R09: 0000000000000000 R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000d41 R13: 0000000067e52feb R14: 0000000000000006 R15: 00005629f34aca60 rcu: rcu_preempt kthread starved for 10156 jiffies! g31733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5366 [inline] __schedule+0x1b18/0x50e0 kernel/sched/core.c:6747 __schedule_loop kernel/sched/core.c:6824 [inline] schedule+0x163/0x360 kernel/sched/core.c:6839 schedule_timeout+0x15b/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2e1/0x1340 kernel/rcu/tree.c:2046 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2248 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 08 c0 3f 93 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d b5 1a 6f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197d08 EFLAGS: 00000246 RAX: ffff88801da85a00 RBX: ffff888020eea864 RCX: ffffffff8c1b47ac RDX: 0000000000000001 RSI: ffff888020eea800 RDI: ffff888020eea864 RBP: ffffffff93411c78 R08: ffff8880b8732b5b R09: 1ffff110170e656b R10: dffffc0000000000 R11: ffffffff8c1b6280 R12: ffff888021f58800 R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f338d40 FS: 0000000000000000(0000) GS:ffff888125324000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555f1aa608 CR3: 0000000063408000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:701 cpuidle_enter_state+0x111/0x480 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x374/0x5d0 kernel/sched/idle.c:325 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423 start_secondary+0xfe/0x100 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147